@kybernesis/create 0.23.0 → 0.23.1

package/dist/capabilities.d.ts

@@ -1,5 +1,13 @@
 import { type HostKind } from "./templates.js";
 import type { ModelScaffoldConfig } from "./model-reach.js";
+/**
+ * The registry items install the newest release of each third-party
+ * extension, and those are built on a later eve than the certified one, which
+ * eve then refuses at discovery ("has no compile or runtime usage") and the
+ * agent never boots. These are the releases proven on the certified eve.
+ * Move them with the eve certification, never on their own.
+ */
+export declare const ENGINEER_EXTENSION_PINS: readonly ["@agent-browser/eve@0.34.0", "@github-tools/eve-extension@0.8.0"];
 /**
  * Agent-to-agent: the eve channel becomes the governed dispatch door (people
  * still come in through kybernesisAuth in the same walk) and granted peers

package/dist/capabilities.js

@@ -13,6 +13,14 @@ import { run, yellow } from "./util.js";
 // self-hosted agent it cannot get an OIDC token and the agent fails to boot.
 const ENGINEER_ITEMS_ALL = ["extension/agent-browser", "extension/github-tools"];
 const ENGINEER_ITEMS_VERCEL = ["connection/vercel"];
+/**
+ * The registry items install the newest release of each third-party
+ * extension, and those are built on a later eve than the certified one, which
+ * eve then refuses at discovery ("has no compile or runtime usage") and the
+ * agent never boots. These are the releases proven on the certified eve.
+ * Move them with the eve certification, never on their own.
+ */
+export const ENGINEER_EXTENSION_PINS = ["@agent-browser/eve@0.34.0", "@github-tools/eve-extension@0.8.0"];
 function write(dir, path, content) {
     const full = join(dir, path);
     mkdirSync(join(full, ".."), { recursive: true });
@@ -48,6 +56,13 @@ export function applyEngineer(dir, host, model) {
         if (!ok)
             console.log(yellow(`  ! ${item} did not install cleanly — re-run: npx eve add ${item}`));
     }
+    // --legacy-peer-deps: both declare peer ranges that trail the certified eve.
+    const pinned = run("npm", ["install", "--save-exact", "--legacy-peer-deps", ...ENGINEER_EXTENSION_PINS, "--no-audit", "--no-fund"], {
+        cwd: dir,
+        allowFail: true,
+    });
+    if (!pinned)
+        console.log(yellow(`  ! could not pin ${ENGINEER_EXTENSION_PINS.join(" ")} — install them by hand or discovery refuses the newer ones`));
     for (const file of plan.files)
         write(dir, file.path, file.content);
     // A declared subagent sees none of the root's skills, so the memory skills

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.23.0",
+  "version": "0.23.1",
   "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",